Analysis
-
max time kernel
85s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
27-09-2022 17:08
General
-
Target
Accounting.lnk
-
Size
1KB
-
MD5
040f242254de5cfd7c22f94f63cdd279
-
SHA1
0af3db040791ff5c2084b7588aaa7c0c4c40f338
-
SHA256
b5e6cb534363ee26bb64ecc1b0523803912fc84280df3cbeedfadd10773235c9
-
SHA512
c255b507efc169d98f858f86ef0d4c3ab88dd440143d857321da0aec849f4c937dc8719f5749443a0b7887c653a1ccee715b27ba91dc7c2b2dc61a414ab0509f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Accounting.lnk1⤵